On October 26, 2017, MyHeritage Ltd., a genealogy and DNA testing company, suffered a significant data breach exposing the email addresses and hashed passwords of approximately 92,283,889 users. The incident was discovered in June 2018 when a security researcher found a file named myheritage.com on a private server outside the company’s infrastructure. While the breach involved a massive volume of user credentials, MyHeritage clarified that no highly sensitive personal data—such as DNA records, payment information, or other personally identifiable information (PII)—was compromised. The company responded by notifying affected users, enforcing password resets, and implementing additional security measures, including two-factor authentication (2FA). The breach highlighted vulnerabilities in third-party storage practices and underscored the risks of credential exposure, even when data is hashed. Although no direct financial or identity theft consequences were reported, the scale of the breach posed reputational risks and raised concerns about potential downstream attacks, such as credential stuffing or phishing campaigns targeting users with reused passwords.